| tiêu đề | PHPGurukul Hospital Management System 4.0 SQL Injection |
|---|
| Mô tả | A time-based blind SQL injection vulnerability exists in the Doctorspecialization parameter of Hospital Management System v4.0, allowing remote attackers to execute arbitrary SQL commands by triggering time delays in the database response.
Affected file path: hospital/hms/doctor/edit-profile.php |
|---|
| Nguồn | ⚠️ https://github.com/Ant1sec-ops/HMS4.0-Avdisories/blob/main/Time-based-blind-sql-on-doctor-edit-profile/Exploit.md |
|---|
| Người dùng | Subhash Paudel (UID 66830) |
|---|
| Đệ trình | 08/06/2025 20:22 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 15/06/2025 12:44 (7 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 177397 [PHPGurukul Hospital Management System in PHP 4.0 \hms\edit-profile.php Tiêm SQL] |
|---|
| điểm | 0 |
|---|